CLOUDFLARE 


Zero Trust Browsing 


New remote browser isolation service runs in the cloud away from your networks and 
endpoints, drastically reducing the attack surface and stopping unknown malware. 


No IT team can keep every browser patched against known vulnerabilities, 
and no secure web gateway can block every threat. Executing browser : : 
code in the cloud, instead of on the endpoint, helps solve these problems, Attacks will strike. 
but existing technologies have unreliable rendering and poor performance. Mitigate the impact. 
Cloudflare's new remote browser isolation service stops malware before it 

infects endpoints, and the experience feels like a local browser. 


Not your average remote browser i 
Zero Trust browsing 


stops malicious code on 
uncategorized, risky, or 
even low-risk sites from 
infecting users' devices. 
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| í With Cloudflare for Teams, 
rb, y set Zero Trust browsing 
policies in the same place 
you manage application 


access. 
NEA 
i | Compatibility Browser Isolation now comes j i 
| , , — natively integrated in the Cloudflare Stop data loss and phishin 
Works natively in existing for Teams ici builder, allowing by Steins user eee 
browsers. administrators to allow, block, or (keyboard input, copy, 
isolate any security or content print, up/download) within 
category and application group. applications or risky sites. 
Filtering, inspection and isolation 
Delivers a low latency rules are applied in one lightning- 
stream of the webpage. fast single pass inspection. 


cloudflare.com/browser-isolation REV: 2021 March 
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Local vs Remote Browsing: what's different? 


Local 


Untrusted web page code and 
phishing sites execute locally on 
the endpoint device. Users can 
freely input sensitive data into 
phishing websites and their devices 
and data are directly exposed to 
unpatched or zero-day threats. 
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Remote 


Unfiltered code or sites can be 
executed in a continuously- 
patched remote browser. User 
interaction is controlled to prevent 
malware and phishing attacks and 
zero-day attacks are cordoned 
from the end-user's device. 
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The Cloudflare Difference 


Network Vector Rendering 


Unlike bandwidth-heavy pixel 
pushing or fragile content-disarm 
and reconstruction techniques, 
NVR streams safe draw commands 
to the device without transmitting 
any malicious web page code or 
impacting the end user experience. 
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Cloudflare Global Network 


Other providers host remote 


browsers in public cloud providers. 


Cloudflare positions browsers 
closer to your users for an 
experience that feels no different 
than local browsing, anywhere. 
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Key Features 


e Protect devices from 
malicious content 


e Protect users from 
phishing sites 

e Execute all browser code 
in the cloud 


e Mitigate the impact of 
attacks 


e Seamless, lightning-fast 
end user experience 


e Recursive DNS Filters 
e Layer 7 Proxy Filters 
e Antivirus inspection 

e CASB-lite 


e Categorized application 
groups for Shadow IT 
visibility 

e Identity-based country 
and device detail views 


e Push logs to cloud 
storage or SIEMs 


e Security categories (13) 
via machine learning and 
threat intelligence feeds 


e Content categories 
(100+) for acceptable 
use 


e Custom block, allow, or 
decryption bypass lists 


e Granular HTTP and URL 
rules 


e Fastest, intelligent IP 
routing (<100ms) 


e Fastest, global edge 
network (200+ PoPs) 


e Fastest, global policy 
updates (<5 seconds) 


100% uptime SLA 


cloudflare.com/teams/browser-isolation 


